CRITICAL🇵🇱 Wersja polska

CVE-2018-4018

CVSS 9.8v3.1pub. 2019-05-13upd. 2024-11-21

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware, running on Anker Roav A1 Dashcam version RoavA1SWV1.9. The HTTP server allows for arbitrary firmware binaries to be uploaded which will be flashed upon next reboot. An attacker can send an HTTP PUT request or upgrade firmware request to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Anker In Roav Dashcam A1

    HW
    Anker-In
    all versions

  • Anker In Roav Dashcam A1 Firmware

    OS
    Anker-In
    1.9
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-4014CRITICAL9.8PL ✓same product

RCE przez stack-based buffer overflow w Roav Dashcam A1 (Wi-Fi Command 9999)

CVE-2018-4023CRITICAL9.8PL ✓same product

RCE przez stack-based buffer overflow w Anker Roav A1 Dashcam

CVE-2018-4029CRITICAL9.8PL ✓same product

RCE w firmware NT9665X — Anker Roav A1 Dashcam (zapis poza granicami pamięci)

CVE-2018-4028HIGH7.5same product

An exploitable firmware update vulnerability exists in the NT9665X Chipset firmware running on the Anker Roav ...

CVE-2018-4024HIGH7.5same product

An exploitable denial-of-service vulnerability exists in the thumbnail display functionality of the NT9665X Ch...